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Amendments to the Claims: 

Please amend claims 1,2,13,14 and 20 as indicated below. This listing of claims 
will replace all prior version, and listings, of claims in the application: 

Listing of Claims: 

1 .(corrently amended): A method for providing a cryptographic service utilizing a 

server on a network, comprising: 

(a) identifying a client utilizing the network; 

(b) establishing a first key; 

(c) generating a tunnel on the network; 

(d) rf^reiving infnrmation pa second kev a t the server from the client utilising the 
tunnel, wherein the second kev infomiation i s encrypted by the client using the 
first ke v, the second kev being a privat e kev of a kev pair; and 

(e) perionning uic crypio^apiuw ^clvlip'C at luc ^viv^-a. ^^ja wav.*^. .^ ^^^^ t ^. 

the second kev to perform the crvptographic service, whereby the server off-loads 
a computational burden associated with the cryptographic sendee from the client. 

2. (currently amended): A method as recited in claim 1 , wherein thea second key is 

encrypted by the chent using the first ke y, and further oompriGing roc e iving - t - b e 
second koy at the aorvor , 

3. (previously presented): A method as recited in claim 2, wherein the second key 

comprises at least one parameter for tl^e cryptographic service performed by the 
server, 

4. (canceled) 

5. (previously presented): A method as recited in claim 1 , wherein the cryptographic 

service includes modular exponentiation. 

6. (previously presented): A method as recited in claim 1 , further comprising the step 

of transmitting cryptographic service results to the client. 
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7. (previously presented): A method as recited in claim 6, fUrther comprising: the step 

of encrypting the cryptographic service results utifeinfi the first key. 

8. (previously presented): A method as recited in claim 6, wherein the cryptographic 

service results are transmitted to a third party. 

9. Cpreviously presented): A method as recited in claim 1 , further comprising tlie step 

of charging a fee for the cryptographic service performed by the server. 

1 0. (original): A method as recited in claim 9, wherein the fee is charged to the client 

1 1 .(original): A method as recited in claim 1, wherein the first key comprises an 
encryption key for a symrnetric cipher, 

1 2. (original): A method as recited in claim 1 , wherein the first key comprises an 

encryption key for an asymmetric cipher. 

13. (currently amended): A computer program embodied on a computer readable 

medium for providing a cryptographic service utilizing a server on a network, 
comprising: 

(a) a code segment for identifying a client utilizing the network; 

(b) a code segment for establishing a first key; 

(c) a code segment for generating a tunnel on the network; 

(d) a code segment for receiving informati eB -a $econd key a t the server from the 
client utilizing the tuimel, wherein the informati e ftsccond kev i$ encrypted by the 
client using the first ke v. tlie second kev being a private key of a key pair : and 

(e) a code segment for performing the cryptographic service at the server for the 
clien t the server using the second key to t^erform the cryptographic service. 
whereby the server off-loads a computational burden associated with the 
cryptographic service from the client. 



A0044-US-NP 



Page 3 of 11 



09/596,652 



PAGE 8/19 ' RCVD AT 6/1/2005 7:13:17 PNI [Eastern DayOght Time] * SVR:USPT0-EFXRF-1/1 * DNIS:8729306 ' CSID:+€508124274 * DURATION (mm-ss):05-22 



Jun-01-2005 03:27pih Frora-OGCPALOALTO 



+6508124274 



T-023 P. 009/01 9 F-130 



PATENT 

14. (currently amended): A computer program as recited in claim 13, wherein 

second key is encrypted by the client using the first key, and further comprising a 
code segment for receiving the second key at the server, 

1 5. (previously presented): A computer program as recited in claim 14, wherein the 

second key comprises at least one parameter for the cryptographic service 
performed by the server. 

16. (canceled): 

1 7. (pTeviously presented): A computer program as recited in claim 13, wherein the 

cryptographic service includes modular exponentiation. 

1 8. (previoiisly presented): A computer program as recited in claim 13, further 

comprising a code segment that traiismits the cryptographic service results to the 
client, 

t f\ r : ^1 — 1\. A *^-,*^r»-»>nvvi or- T'e»/^*^a/^ t«^r»loi-m 1C ■fiTrtVljS'r 

comprising a code segment that encrypts the cryptographic service results 
utilizing the first key. 

20.(currently amended): A system for providing a cryptographic service utilizing a 
server on a network, comprising: 

(a) logic for identifying a client utilizing the network; 

(b) logic for establishing a first key; 

(c) logic for generating a turmel on the network; 

(d) logic for receiving information a second key a t the server from the client utilizing 
the tunnel, wherein the informatio Rsecond key is encrypted by the client using the 
first ke v, the second key being a private kev of a kev pair ; and 

(e) logic for performing the cryptographic service at the server for the clien t, the 
server using the second kev to perform the cryptographic service, whereby the 
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server off-load$ a computational burden associated with the cryptographic service 
from the client 

21 .(previously presented): A method as recited in claim 3, wherein a message or a 

cyphertext comprises a second parameter for the cryptographic service performed 
by the server. 

22.(original): A method as recited in claim 21 , wherein the message or cyphertext has 
been blinded by the user before transmittal to the server. 
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